Removed for now CORS enabled headers to server.js